Behavioral task
behavioral1
Sample
4994acc74aed6169f6961f310a05ba99fb1504d9a34fb0b8e31604b5dc94c081.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
4994acc74aed6169f6961f310a05ba99fb1504d9a34fb0b8e31604b5dc94c081.exe
Resource
win10v2004-20231023-en
General
-
Target
4994acc74aed6169f6961f310a05ba99fb1504d9a34fb0b8e31604b5dc94c081.exe.zip
-
Size
265KB
-
MD5
09b573109fc40db220b0a363b23bae53
-
SHA1
20b43a2e9702aaab1d536312c59905d3bc4f98a2
-
SHA256
c945826feaaac44c63e571095b7c9e203ec8293f17000025781499768b535733
-
SHA512
dfad19bd555aa6ed77c2653ddbb037feb9ccf8e4e65ca3bc0906dac048e1bfc0ba9f6b257ff27911963ee69eabcc151046c637ef78c3dda815f7db4d06e6e052
-
SSDEEP
6144:hlu3GyQWOBK0WmRC2kwgsbQnwsIiyJVwrm:92IK0Wm19lIPynwrm
Malware Config
Signatures
-
resource yara_rule static1/unpack001/4994acc74aed6169f6961f310a05ba99fb1504d9a34fb0b8e31604b5dc94c081.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4994acc74aed6169f6961f310a05ba99fb1504d9a34fb0b8e31604b5dc94c081.exe
Files
-
4994acc74aed6169f6961f310a05ba99fb1504d9a34fb0b8e31604b5dc94c081.exe.zip.zip
Password: infected
-
4994acc74aed6169f6961f310a05ba99fb1504d9a34fb0b8e31604b5dc94c081.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 456KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 260KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE